Sub-processors
This list names external providers that may process personal data on behalf of the Client in the course of operating SmartShelf. The specific processing depends on the service actually used.
| Provider | Service / purpose | Possible data | Processing region / transfer |
|---|---|---|---|
| netcup GmbH | VPS/server hosting of the production SmartShelf application and database environment | Application and database data; technical system data | Germany / EU |
| Cloudflare, Inc. | DNS, reverse proxy/CDN and S3-compatible object storage (R2) for encrypted backups, where used | IP/connection data; technical metadata; encrypted backup data | Depends on the service; third-country transfer only under an applicable DPA/transfer mechanism, e.g. standard contractual clauses, where required |
| Raintank, Inc. dba Grafana Labs | Grafana Cloud for monitoring, logs and traces | Technical telemetry; logs; request/system metadata, to the extent relatable to persons | According to the selected Grafana Cloud region; third-country transfer only under an applicable DPA/transfer mechanism, where required |
| Plus Five Five, Inc. (Resend) | Sending transactional emails, e.g. invitations, password resets, 2FA and system notifications | Email address, name where applicable, message content and sending and delivery metadata | USA / third-country transfer on the basis of the Resend DPA, EU standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework |
Changes
1.Kais Solutions informs the Client of intended additions or replacements of sub-processors in accordance with the DPA, so that the Client can object on legitimate data protection grounds.
2.Not every service provider engaged by Kais Solutions is automatically a sub-processor. Further providers are added as soon as they store or process personal data on behalf of the Client in the actual operation of SmartShelf.